Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File:                     QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier:          c0qIdYgxNizvw4dfnrtdh8GzdOIP1v4uhnqvGRv5oYw=
Subject key identifier:   5C:07:AB:D4:EE:92:A3:AA:18:A4:E0:0D:B9:6B:C3:F9:BA:F5:E7:AE
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer:       /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial:       0195124718E79808E11D6C5F7975A312597A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number:          0F2C
Signing time:             Mon 17 Feb 2025 05:00:04 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:04 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:04 +0000
Files and hashes:         1: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: ZU9G4e6YJ1Hnq+jioWGyQDjQOMR+1ie3R4KhA6smFV8=)
                          2: WhWQtaasnXhce4uUgLMkfia6_fo.roa (hash: D7trmdSCq7r/k8TYb50IMju8s2o1usQc52do6qxrWBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:18:e7:98:08:e1:1d:6c:5f:79:75:a3:12:59:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
        Validity
            Not Before: Feb 17 05:00:04 2025 GMT
            Not After : Feb 18 05:00:04 2025 GMT
        Subject: CN=5c07abd4ee92a3aa18a4e00db96bc3f9baf5e7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f4:6c:bf:fc:87:b5:37:72:27:40:96:d6:10:
                    0e:3d:ea:58:05:b4:ed:b7:d2:65:69:50:b9:6f:aa:
                    0d:52:b6:00:72:43:9c:bc:f7:d5:e3:f9:9f:fa:77:
                    45:ef:f7:98:93:8d:74:38:ac:5f:02:4b:7f:ef:07:
                    9b:16:00:cd:ae:e8:c9:cb:11:31:dd:0c:64:6e:3a:
                    22:a7:e3:fb:a6:11:26:ee:e4:29:fe:88:9c:e8:95:
                    1f:44:d8:0f:fb:e5:f7:c4:bf:9a:e4:a9:cb:b2:15:
                    7b:f7:41:88:71:d0:08:57:67:f3:cb:b1:87:30:22:
                    4e:2c:fa:eb:6c:a3:f0:e2:af:44:52:3f:a3:db:04:
                    eb:b4:49:6d:9b:c9:ee:72:14:14:bc:7b:60:8c:ce:
                    f5:97:d9:62:67:fe:d6:e0:93:9d:83:d4:26:f2:c1:
                    d3:fd:9a:e9:23:6e:ed:a2:f4:12:16:37:16:29:89:
                    41:c9:d6:a8:db:2f:5f:d4:d2:57:22:ad:3a:2c:bd:
                    4f:01:95:7b:a8:bd:12:2d:10:7d:eb:8a:2a:f3:70:
                    77:77:8f:dd:a5:96:33:ae:67:b9:cb:59:e9:60:01:
                    33:4a:1c:62:a1:ec:5b:83:c3:09:36:f9:be:ba:19:
                    71:c1:02:e8:cc:d1:83:cb:0e:82:42:71:4e:f6:30:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:07:AB:D4:EE:92:A3:AA:18:A4:E0:0D:B9:6B:C3:F9:BA:F5:E7:AE
            X509v3 Authority Key Identifier:
                keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:0c:65:2e:bb:72:b5:e5:10:5f:09:da:d8:8f:d9:7c:55:30:
         7a:0b:cd:48:9c:ff:76:a8:fc:45:90:f4:e3:35:72:30:7a:5d:
         df:41:e6:47:00:dd:c0:ce:2c:a6:e2:65:de:53:3e:49:e9:07:
         e3:4c:46:a0:24:5d:ef:70:e6:50:8b:47:11:6d:ad:ed:3e:12:
         18:bb:c4:d2:f1:93:6d:30:ce:5f:e8:aa:9d:f9:74:da:33:c7:
         df:e0:60:36:95:ac:e0:20:6d:98:d1:0f:69:4b:c2:ad:34:4a:
         c6:b5:c6:cb:9a:a9:0a:c9:28:5e:dc:ef:85:8f:ec:34:58:bc:
         0d:0e:da:91:f8:a0:99:83:6b:00:07:8b:a6:c2:c1:e9:ea:a5:
         0e:73:05:ec:12:a9:5f:07:f1:74:01:ac:25:10:3a:11:2c:c0:
         6f:3d:c2:be:a9:1c:18:a8:79:91:17:5e:af:2c:42:ee:dc:e5:
         dd:03:21:20:fe:fc:f8:95:90:65:cb:d8:4d:04:28:9b:ca:43:
         f0:af:07:5b:3e:7d:c7:7d:79:40:43:2b:94:02:06:6c:10:e3:
         f3:39:a6:6c:ba:1d:3e:f3:34:1e:30:91:24:ed:1e:68:94:a3:
         67:36:70:13:e9:34:a4:a5:42:72:49:e4:d0:9c:dd:0c:2e:f0:
         77:a7:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:03 2025 by rpki-client